Rohde & Schwarz DPI software adds Discord chat-app detection
Leipzig, Germany. Rohde & Schwarz, in its role as a vendor of deep-packet inspection (DPI) software, has announced the release of a new Discord application classification feature in its R&S PACE 2 DPI engine. The OEM software solution is now able to reliably detect and classify network traffic related to the Discord chat application in real time.
Discord is a modern voice and text chat app, similar to programs such as Skype or TeamSpeak, designed specifically for gaming communities. The communication platform has seen tremendous growth over the past year with currently around 130 million registered users worldwide. The number of daily active users has increased to 19 million from 8.9 million in 2017. However, Rohde & Schwarz reports, its ascent to the most popular online communication tool for gamers has resulted in adverse effects on network utilization and performance. Network operators may face problems when their efforts to keep applications running fast and reliably clash with latency, congestion, packet loss, and jitter. Network operators need to understand how the application and its high number of users consume bandwidth resources in order to adapt their service. They need to define traffic management policies to control application performance according to their business priorities—making sure their network services continue to meet user expectations.
Real-time application visibility provided by the R&S PACE 2 DPI engine enables network-analytics and traffic-management vendors to see the impact of Discord on their networks. By embedding R&S PACE 2, network operators obtain deep insight into Discord traffic flows that helps them analyze, control, prioritize and manage Discord traffic.
Additionally, network security vendors are now able to accurately and reliably identify unusual Discord network activities that might indicate malicious behavior. A Discord attack in 2017 has shown that cybercriminals can find ways to abuse built-in features of the chat platform—in this case, its application programming interface (API) was used to obtain user credentials for the famous online game ROBLOX in order to steal large sums of money.
“Security teams need application visibility to look at patterns in the data. A deeper level of traffic inspection is important to detect unusual activity. The new Discord detection functionality enables network security solutions to distinguish legitimate use of the chat app from malicious activity,” said Alexander Müller, senior product manager, DPI, at Rohde & Schwarz.
The R&S PACE 2 DPI software library provides reliable detection and classification of thousands of applications and protocols by combining deep packet inspection and behavioral traffic analysis—regardless of whether the protocols use advanced obfuscation, port-hopping techniques, or encryption. DPI is needed at all points in the network architecture where intelligent decisions need to be made based on the nature of IP traffic, whether it is wanted or unwanted, good or malicious traffic.